Problem mit easy-search und Message Boxen

d.joussen

Hallo zusammen,

ich habe auf einem Rechner eines Bekannten folgende Problem:

Sobald er ins Internet will, kommt immer die Startseite easysearch.biz.
Das 2. Problem liegt darin, dass sich ständig irgendwelche message Boxes auftun. Ob maql z.b. Pokern will, viagra kaifen will und ähnliches.

Adaware und ähnliches hat nicht geholfen.

Wenn jemand weiss was zu tun ist, bitte genaue angabe was ich machen soll.

Von Computern hab ich Ahnung, aber von Viren und so einem Kram hab ich nur wenig Erfahrung.

Ich hab mal die Log-Files von HijackThis angefügt.

Vielen Dank für eure Hilfe

Gruss
Dirk

Logfile of HijackThis v1.99.1
Scan saved at 15:04:15 PM, on 30.03.2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0100)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\SYSTEM\MSMSGS.EXE
C:\WINDOWS\POPUPER.EXE
C:\WINDOWS\SYSTEM\HELPER.EXE
C:\WINDOWS\TASKMON.EXE
C:\PROGRAMME\TOTALCMD\TOTALCMD.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\MDSETSPW.EXE
C:\PROGRAMME\HEWLETT-PACKARD\DIGITAL IMAGING\BIN\HPOTDD01.EXE
C:\WINDOWS\SYSTEM\HPZTSB09.EXE
C:\PROGRAMME\HEWLETT-PACKARD\HP SOFTWARE UPDATE\HPWUSCHD.EXE
C:\PROGRAMME\HP\HPCORETECH\HPCMPMGR.EXE
C:\WINDOWS\IAU.EXE
C:\WINDOWS\MSQDEVL.EXE
C:\WINDOWS\LSSAS.EXE
C:\WINDOWS\MSERVICE.EXE
C:\PROGRAMME\T-ONLINE\T-ONLINE_SOFTWARE_5\BASIS-SOFTWARE\BASIS1\TOADIMON.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SVSHOST.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAMME\T-ONLINE\WLAN-ACCESS FINDER\TOWLAACF.EXE
C:\PROGRAMME\WINZIP\WZQKPICK.EXE
C:\WINDOWS\STISVSQ.EXE
C:\PROGRAMME\DT\SINUS 154 STICK\WIFIUSB.EXE
C:\TEMP\HIJACKTHIS.EXE
C:\PROGRAMME\GEMEINSAME DATEIEN\MARMIKO SHARED\MWLAMAS.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAMME\HP\HPCORETECH\SOLN\HPOSM.EXE
C:\PROGRAMME\HP\HPCORETECH\COMP\HPTSKMGR.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = https://
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [ModemUtility] mdsetspw.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Programme\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\SYSTEM\hpztsb09.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [HP Software Update] "C:\Programme\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\PROGRAMME\HP\HPCORETECH\HPCMPMGR.EXE"
O4 - HKLM\..\Run: [MSN Messenger] C:\WINDOWS\SYSTEM\msmsgs.exe
O4 - HKLM\..\Run: [Microsoft Internet Acceleration Utility] iau.exe
O4 - HKLM\..\Run: [Internet Connection Wizard] stisvsq.exe
O4 - HKLM\..\Run: [Games Acceleration] svshost.exe
O4 - HKLM\..\Run: [Internet Mail and News] msqdevl.exe
O4 - HKLM\..\Run: [Microsoft Management Console] lssas.exe
O4 - HKLM\..\Run: [Multimedia extensions] mservice.exe
O4 - HKLM\..\Run: [ToADiMon.exe] C:\PROGRAMME\T-ONLINE\T-ONLINE_SOFTWARE_5\BASIS-SOFTWARE\BASIS1\ToADiMon.exe -TOnlineAutodialStart
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKCU\..\Run: [Microsoft Internet Acceleration Utility] iau.exe
O4 - HKCU\..\Run: [Internet Connection Wizard] stisvsq.exe
O4 - HKCU\..\Run: [Games Acceleration] svshost.exe
O4 - HKCU\..\Run: [Internet Mail and News] msqdevl.exe
O4 - HKCU\..\Run: [Microsoft Management Console] lssas.exe
O4 - HKCU\..\Run: [Multimedia extensions] mservice.exe
O4 - HKCU\..\Run: [T-Online_Software_5\WLAN-Access Finder] C:\PROGRAMME\T-ONLINE\WLAN-ACCESS FINDER\TOWLAACF.EXE /StartMinimized
O4 - Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE
O4 - Startup: WinZip Quick Pick.lnk = C:\Programme\WinZip\WZQKPICK.EXE
O4 - Startup: Sinus 154 stick WLAN Manager.lnk = C:\Programme\DT\Sinus 154 stick\Wifiusb.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Microsoft AntiSpyware helper - {96042865-30B3-4EC4-8451-3518AE9469DC} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {96042865-30B3-4EC4-8451-3518AE9469DC} - (no file) (HKCU)
O12 - Plugin for .pdf: C:\PROGRA~1\INTERN~1\PLUGINS\nppdf32.dll
O16 - DPF: {11111111-1111-1111-1111-111191113457} - file://c:\ied_s7.cab
O16 - DPF: {11111111-1111-1111-1111-511111193457} - file://c:\x.cab
O16 - DPF: {11111111-1111-1111-1111-511111193458} - file://c:\x.cab
O16 - DPF: {23232323-2323-2323-2323-232323291122} - file://c:\x.cab
O16 - DPF: {24311111-1111-1121-1111-111191113457} - file://c:\eied_s7.cab
O16 - DPF: {33331111-1111-1111-1111-611111193457} - file://c:\ex.cab
O16 - DPF: {33331111-1111-1111-1111-611111193458} - file://c:\ex.cab


(3.25.05 14:15:29 PM) SPSeHjFix started v1.09
(3.25.05 14:15:29 PM) OS: WinME (4.90.73010104)
(3.25.05 14:15:29 PM) Language: english
(3.25.05 14:15:31 PM) Disinfect started
(3.25.05 14:15:31 PM) Bad-Dll(IEP): (not found)
(3.25.05 14:15:31 PM) Bad-Dll(IEP) in BHO: (not found)
(3.25.05 14:15:31 PM) UBF: 4
(3.25.05 14:15:31 PM) UBB: 0
(3.25.05 14:15:31 PM) UBR: 29
(3.25.05 14:15:31 PM) Bad IE-pages:
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
(3.25.05 14:15:31 PM) Stealth-String not found:
(3.25.05 14:15:31 PM) Not infected->END


(3.25.05 14:16:12 PM) SPSeHjFix started v1.09
(3.25.05 14:16:12 PM) OS: WinME (4.90.73010104)
(3.25.05 14:16:12 PM) Language: english
(3.25.05 14:16:13 PM) Disinfect started
(3.25.05 14:16:13 PM) Bad-Dll(IEP): (not found)
(3.25.05 14:16:13 PM) Bad-Dll(IEP) in BHO: (not found)
(3.25.05 14:16:13 PM) UBF: 4
(3.25.05 14:16:13 PM) UBB: 0
(3.25.05 14:16:13 PM) UBR: 29
(3.25.05 14:16:13 PM) Bad IE-pages:
(3.25.05 14:16:13 PM) Stealth-String not found:
(3.25.05 14:16:13 PM) Not infected->END